DEV Community

npm

Node Package Manager

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Supply Chain Security measures

Supply Chain Security measures

Comments
1 min read
I open-sourced salt-theme-gen

I open-sourced salt-theme-gen

8
Comments 6
3 min read
I Built a Zero-Dependency Supply-Chain Security Scanner for Node.js — 21 Checks, One Command

I Built a Zero-Dependency Supply-Chain Security Scanner for Node.js — 21 Checks, One Command

1
Comments 3
5 min read
AI Wrote Code But You Don't Have npm? Here's What to Do

AI Wrote Code But You Don't Have npm? Here's What to Do

1
Comments
8 min read
The Axios npm Supply Chain Attack (March 2026): A 2-Second Breach Window That Compromised the JavaScript Ecosystem

The Axios npm Supply Chain Attack (March 2026): A 2-Second Breach Window That Compromised the JavaScript Ecosystem

5
Comments 1
5 min read
The axios Attack Was a Wake-Up Call. Your AI Agent Just Ran npm install Without Asking You.

The axios Attack Was a Wake-Up Call. Your AI Agent Just Ran npm install Without Asking You.

Comments
5 min read
axios Was Compromised on npm — What Happened, How It Works, and What You Must Do Right Now

axios Was Compromised on npm — What Happened, How It Works, and What You Must Do Right Now

5
Comments
9 min read
Whole-laptop scanner for the Axios supply chain attack

Whole-laptop scanner for the Axios supply chain attack

5
Comments
3 min read
The Axios NPM Package Compromise: Lessons for Startups and Tech Firms

The Axios NPM Package Compromise: Lessons for Startups and Tech Firms

1
Comments 2
5 min read
The Axios Supply Chain Attack Explained: How a Compromised npm Account Put 83 Million Projects at Risk

The Axios Supply Chain Attack Explained: How a Compromised npm Account Put 83 Million Projects at Risk

1
Comments 3
6 min read
"Welcome to Transitive Dependency Hell"

"Welcome to Transitive Dependency Hell"

Comments 1
5 min read
npm install tips para la seguridad

npm install tips para la seguridad

2
Comments 4
1 min read
Your npm Package Is Leaking Source Code (And You Probably Don't Know It)

Your npm Package Is Leaking Source Code (And You Probably Don't Know It)

1
Comments
4 min read
Axios Compromise: What Happened, Why It Matters, and What We Should Do Next

Axios Compromise: What Happened, Why It Matters, and What We Should Do Next

Comments
2 min read
API Drift Guard: Catch Breaking API Changes

API Drift Guard: Catch Breaking API Changes

3
Comments 1
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.